Read the docs

dragonflydb

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

dragonflydb records in CISA KEV

No dragonflydb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Dragonfly · all components

TI-2025-19280 CVE-2025-26269 · GHSA-cqc2-rc24-647j

Integer underflow in dragonflydb Dragonfly

Priority MEDIUM 58

DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00292 Published 2025-04-17 No fix listed CWE-191
Open these records in search →